Vulnerability Details : CVE-2010-0037
Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted DNG image.
Vulnerability category: OverflowExecute codeDenial of service
Products affected by CVE-2010-0037
- cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2010-0037
1.68%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 87 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2010-0037
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST | |
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2024-10-15 |
CWE ids for CVE-2010-0037
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2010-0037
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/55747
Apple Mac OS X Image RAW DNG image buffer overflow CVE-2010-0037 Vulnerability Report
-
http://secunia.com/advisories/38241
Sign in
-
http://www.securitytracker.com/id?1023473
Mac OS X Image Raw Buffer Overflow in Processing DNG Image Files Lets Remote Users Execute Arbitrary Code - SecurityTracker
-
http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html
Apple - Lists.apple.com
-
http://support.apple.com/kb/HT4004
About Security Update 2010-001 - Apple SupportVendor Advisory
-
http://www.securityfocus.com/bid/37869
Apple Mac OS X Image RAW 'DNG' Image Handling Buffer Overflow Vulnerability
-
http://www.vupen.com/english/advisories/2010/0173
Webmail | OVH- OVH
Jump to